← Back to all threat actors

ZIRCONIUM

Also known as APT31, Violet Typhoon
Tracked as G0128

ZIRCONIUM is a threat group operating out of China, active since at least 2017, that has targeted individuals associated with the 2020 US presidential election and prominent leaders in the international affairs community.

How we source and review actor profiles
Motivation
nation-state
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Cataloged
IdentityAlias: APT31

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: Violet Typhoon

Reviewed identity mapping approved on this date.

Cataloged
IdentityTracking identifier: G0128

Reviewed identity mapping approved on this date.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

ZIRCONIUMCanonical Name
APT31Alias
Violet TyphoonAlias
G0128Tracking Id

Loading CVEs, techniques, indicators, malware, victims, and activity...